matthew/sonic-buildimage
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

[baseimage]: add docker ps to the sudoer file (#6604)

Browse Source 
fixes Azure/sonic-utilities#1389

With the recent changes in sudoer files. The  show commands fails for the read-only users. 
The problem here is the 'docker ps' is failing in the function [get_routing_stack()](8a1109ed30/show/main.py (L54)) therefore all the CLI commands are failing.

Signed-off-by: Arvindsrinivasan Lakshmi Narasimhan <arlakshm@microsoft.com>
This commit is contained in:
arlakshm 2021-01-29 08:16:32 -08:00 committed by GitHub
parent e623c903bb
commit b5225407ef
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
files/image_config/sudoers/sudoers
View File

@ -25,6 +25,7 @@ Cmnd_Alias READ_ONLY_CMDS = /bin/cat /var/log/syslog*, \
/usr/bin/docker exec bgp cat /etc/quagga/bgpd.conf, \ /usr/bin/docker exec bgp cat /etc/quagga/bgpd.conf, \
/usr/bin/docker images *, \ /usr/bin/docker images *, \
/usr/bin/docker ps *, \ /usr/bin/docker ps *, \
/usr/bin/docker ps, \
/usr/bin/lldpctl, \ /usr/bin/lldpctl, \
/usr/bin/sensors, \ /usr/bin/sensors, \
/usr/bin/tail -F /var/log/syslog, \ /usr/bin/tail -F /var/log/syslog, \